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WHAT IS CLAIMED IS: 

1 . A method for enabling communication between a first processor and a 
second processor using at least one additional processor separate from the first 
processor and the second processor, wherein one or more firewalls selectively 
restrict the communication, the method comprising the steps of: 

determining, at the least one additional processor, whether the first and 
second processors mutually consent to enabling a hairpin between the first and 
second processors; 

providing to the first processor a first information identifying the hairpin and to 
the second processor a second information identifying the hairpin, when the at least 
one additional processor determines that the first and second processors mutually 
consent to the hairpin; 

establishing a first information flow from the first processor to the hairpin 
based on the provided first information; 

establishing a second information flow from the second processor to the hairpin 
based on the provided second information; and 

forwarding, at the hairpin, the first information flow received from the first 
processor to the second processor such that the communication between the first 
and second processors is allowed by the one or more firewalls. 

2. The method of claim 1 , wherein said step of providing a first information 
further comprises the step of: 

providing an IP address and a first port number at the hairpin. 
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3. The method of claim 1 , wherein said step of establishing a first 
information flow further comprises the step of: 

establishing a first flow of packets from the first processor to a first port at the 
hairpin based on the provided first information. 

4. The method of claim 3, wherein said step of establishing a first flow of 
packets further comprises the step of: 

defining the first port as a TCP port at the hairpin. 

5. The method of claim 1 , wherein said step of establishing a second 
infomnation flow further comprises the step of: 

establishing a second flow of packets from the second processor to a second 
port at the hairpin based on the provided second information. 

6. The method of claim 1 , wherein said step of fonA^arding at the hairpin 
further comprises the step of: 

fon/varding the second information flow from second processor to the first 
processor such that the communication between the first and second processors is 
allowed by the one or more firewalls. 

7. A method for enabling communication between a first processor and a 
second processor using at least one additional processor separate from the first and 
second processor, wherein one or more firewalls selectively restrict the 
communication between the first and second processors, said method comprising the 
steps of: 

receiving, at the at least one additional processor, a first request from the first 
processor for a hairpin; 
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receiving, at the at least one additional processor, a second request from the 
second processor for the hairpin; 

authorizing, at the at least one additional processor, a first port at the hairpin 
and a second port at the hairpin, when each of the first and second processors 
consents to enabling the hairpin; 

allocating the first port for the first processor and the second port for the 
second processor; and 

forwarding, at the hairpin, one or more packets received at the first port from 
the first processor to the second port such that the communication between the first 
and second processors is allowed by one or more firewalls. 

8. The method of claim 7, wherein said step of fonA/arding further 
comprises the step of: 

foHA^arding the one or more packets received at the first port without decoding 
one or more payloads included within the one or more packets. 

9. The method of claim 7, further comprising the step of: 
authorizing, at the at least one additional processor, the first processor to 

serve as the hairpin. 

1 0. The method of claim 7, further comprising the step of: 
authorizing the at least one additional processor to serve as the hairpin. 

1 1 . The method of claim 7, further comprising the step of: 
authorizing, at the at least one additional processor, a processor to serve as 

the hairpin, wherein the processor is separate from the first and second processors 
and the at least one additional processor. 
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12. The method of claim 7, further comprising the step of: 
connecting from the first processor to the first port and from the second 

processor to the second port. 

13. The method of claim 12, wherein said step of connecting further 
comprises the step of: 

connecting from the first processor to the first port and from the second 
processor to the second port using a transmission control protocol. 

14. The method of claim 7, wherein said step of allocating further 
comprises the step of: 

defining each of the first and second ports using a transmission protocol. 

15. The method of claim 14, wherein said step of defining further 
comprises: 

defining the transmission protocol as a User Datagram Protocol (UDP). 

16. The method of claim 7, further comprising the step of: 
determining that the one or more firewalls selectively restrict communication 

between the first and second processors. 

17. The method of claim 16, wherein said step of detemiining further 
comprises the step of: 

detemiining, at the at least one additional processor, that the one or more 
firewalls selectively restrict communication between the first and second processors 
based on information provided by the first and second processors. 

1 8. The method of claim 1 6, wherein said step of determining further 
comprises the step of: 
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determining, at the at least one additional processor, that the one or more 
firewalls selectively restrict communication between the first and second processors 
based on information determined by the at least one additional processor. 

19. The method of claim 7, wherein said step of forwarding further 
comprises: 

fonwarding, at the hairpin, one or more packets received at the first port from 
the first processor to the second port. 

20. A system for enabling communication between a first processor and a 
second processor using at least one additional processor separate from the first 
processor and the second processor, wherein one or more firewalls selectively 
restrict the communication, the system comprising: 

means for determining, at the least one additional processor, whether the first 
and second processors mutually consent to enabling a hairpin between the first and 
second processors; 

means for providing to the first processor a first information identifying the 
hairpin and to the second processor a second information identifying the hairpin, 
when the at least one additional processor determines that the first and second 
processors mutually consent to the hairpin; 

means for establishing a first information flow from the first processor to the 
hairpin based on the provided first information; 

means for establishing a second information flow from the second processor 
to the hairpin based on the provided second information; and 
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means for fonwarding, at the hairpin, the first information flow received from 
the first processor to the second processor such that the communication between the 
first and second processors is allowed by the one or more firewalls. 

21 . A system for enabling communication between a first processor and a 
second processor using at least one additional processor separate from the first 
processor and the second processor, wherein one or more firewalls selectively 
restrict the communication, the system comprising: 
at least one memory comprising 

code that determines, at the least one additional processor, whether the 
first and second processors mutually consent to enabling a hairpin between the first 
and second processors, 

code that provides to the first processor a first information identifying 
the hairpin and to the second processor a second information identifying the hairpin, 
when the at least one additional processor determines that the first and second 
processors mutually consent to the hairpin, 

code that establishes a first information flow from the first processor to 
the hairpin based on the provided first information, 

code that establishes a second information flow from the second 
processor to the hairpin based on the provided second information, and 

code that fonwards, at the hairpin, the first Information flow received 
from the first processor to the second processor such that the communication 
between the first and second processors is allowed by the one or more firewalls; and 
at least one processor that executes said code. 
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22. A computer program product for enabling communication between a 
first processor and a second processor using at least one additional processor 
separate from the first processor and the second processor, wherein one or more 
firewalls selectively restrict the communication, the computer program product 
comprising code that, said code comprising: 

code that determines, at the least one additional processor, whether the first 
and second processors mutually consent to enabling a hairpin between the first and 
second processors; 

code that provides to the first processor a first information identifying the 
hairpin and to the second processor a second information identifying the hairpin, 
when the at least one additional processor determines that the first and second 
processors mutually consent to the hairpin; 

code that establishes a first information flow from the first processor to the 
hairpin based on the provided first infonnation; 

code that establishes a second information flow from the second processor to 
the hairpin based on the provided second information; 

code that fonwards, at the hairpin, the first information flow received from the 
first processor to the second processor such that the communication between the 
first and second processors is allowed by the one or more firewalls. 

23. A virtual network comprising: 
a first processor; 
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a second processor; and 

at least one additional processor, separate from tlie first processor and the 
second processor, that enables communication between the first processor and the 
second processor, wherein one or more firewalls selectively may restrict the 
communication, the at least one additional processor further comprising: 

means for determining whether the first and second processors mutually 
consent to enabling a hairpin between the first and second processors, 

means for providing to the first processor a first information identifying the 
hairpin and to the second processor a second information identifying the hairpin, 
when the at least one additional processor determines that the first and second 
processors mutually consent to the hairpin, 

means for establishing a first information flow from the first processor to the 
hairpin based on the provided first information, 

means for establishing a second information flow from the second processor 
to the hairpin based on the provided second Information, and 

means for forwarding, at the hairpin, the first information flow received from 
the first processor to the second processor such that the communication between the 
first and second processors Is allowed by the one or more firewalls. 
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